CVE-2025-32433criticalunder attackCWE-306

CVE-2025-32433: critical vulnerability in erlang otp

Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

Published · Updated

Follow this CVE+ Monitor OTP+ Monitor Erlang/OTP

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA, has a working public exploit and 1 threat group(s) use it.

ssvc Actcvss 10epss 99%
from disclosure to weapon2 days
Published on NVDApr 16
1st PoC+2d
metasploitApr 16
CISA KEV+54d
victimsAug 6
Appeared in 1 incident(s) we investigated
Intranet Gov Brasil (gov.br)
Who exploits it — 1

Groups known to exploit this vulnerability (MITRE ATT&CK attribution).

Ransomwarethegentlemen Vexday
Action required by CISAfederal deadline: 2025-06-30

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

In short

Erlang/OTP's SSH server has a critical flaw that allows attackers to run commands on affected systems without needing a password or valid login credentials. This is a severe security risk because anyone on the network can potentially take control of the server.

Technical detail

A flaw in SSH protocol message handling in Erlang/OTP versions prior to OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20 permits unauthenticated remote code execution. The vulnerability requires network access to the SSH server but no prior authentication; attackers can exploit improper message validation to execute arbitrary commands with server privileges.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
erlang · otp
public PoCs found — 79
githubgithub.com/ProDefense/CVE-2025-32433★ 142githubgithub.com/omer-efe-curkus/CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC★ 16githubgithub.com/NiteeshPujari/CVE-2025-32433-PoC★ 7githubgithub.com/0xPThree/cve-2025-32433★ 6githubgithub.com/ekomsSavior/POC_CVE-2025-32433★ 5githubgithub.com/m0usem0use/erl_mouse★ 5githubgithub.com/dollarboysushil/CVE-2025-32433-Erlang-OTP-SSH-Unauthenticated-RCE★ 3githubgithub.com/darses/CVE-2025-32433★ 3githubgithub.com/LemieOne/CVE-2025-32433★ 3githubgithub.com/0x7556/CVE-2025-32433★ 3githubgithub.com/exa-offsec/ssh_erlangotp_rce★ 3githubgithub.com/yonathanpy/CVE-2025-32433.py★ 2githubgithub.com/mirmeweu/cve-2025-32433★ 2githubgithub.com/AntonieSoga/Erlang-OTP-PoC_CVE-2025-32433★ 2githubgithub.com/joshuavanderpoll/cve-2025-32433★ 2githubgithub.com/becrevex/CVE-2025-32433★ 1githubgithub.com/Know56/CVE-2025-32433★ 1githubgithub.com/bilalz5-github/Erlang-OTP-SSH-CVE-2025-32433★ 1githubgithub.com/iteride/CVE-2025-32433★ 1githubgithub.com/teamtopkarl/CVE-2025-32433★ 1githubgithub.com/Mdusmandasthaheer/CVE-2025-32433★ 0githubgithub.com/meloppeitreet/CVE-2025-32433-Remote-Shell★ 0githubgithub.com/ps-interactive/lab_CVE-2025-32433★ 0githubgithub.com/MrDreamReal/CVE-2025-32433★ 0githubgithub.com/abrewer251/CVE-2025-32433_Erlang-OTP_PoC★ 0githubgithub.com/vigilante-1337/CVE-2025-32433★ 0githubgithub.com/te0rwx/CVE-2025-32433-Detection★ 0githubgithub.com/Epivalent/CVE-2025-32433-detection★ 0githubgithub.com/l1nuxkid/CVE-2025-32433-exploit★ 0githubgithub.com/soltanali0/CVE-2025-32433-Eploit★ 0githubgithub.com/giriaryan694-a11y/cve-2025-32433_rce_exploit★ 0githubgithub.com/blackcat4347/CVE-2025-32433-available-for-windows★ 0githubgithub.com/carlosalbertotuma/CVE-2025-32433★ 0githubgithub.com/0xBlackash/CVE-2025-32433★ 0githubgithub.com/leehunkoo/hk_CVE-2025-32433★ 0githubgithub.com/chuzouX/CVE-2025-32433-Exploit-edited★ 0githubgithub.com/dampedcoast/Exploiting-a-vulnerability-using-reverse-shell★ 0githubgithub.com/ODST-Forge/CVE-2025-32433_PoC★ 0vulncheckvulncheck.com/xdb/963c3b33eb36unverifiedvulncheckvulncheck.com/xdb/aac0bdafa042unverifiedcve_referencegithub.com/ProDefense/CVE-2025-32433/blob/main/CVE-2025-32433.pyunverifiedvulncheckvulncheck.com/xdb/7c0c3994a612unverifiedvulncheckvulncheck.com/xdb/f287f613ac1aunverifiedvulncheckvulncheck.com/xdb/8e367d260b74unverifiedvulncheckvulncheck.com/xdb/a61e0c6ed8a8unverifiedvulncheckvulncheck.com/xdb/874f94accfdeunverifiedvulncheckvulncheck.com/xdb/a2f1151c609aunverifiedvulncheckvulncheck.com/xdb/ec3bcdccec72unverifiedvulncheckvulncheck.com/xdb/42214d962233unverifiedvulncheckvulncheck.com/xdb/822dbe209d89unverifiedvulncheckvulncheck.com/xdb/22d7bf70f177unverifiedvulncheckvulncheck.com/xdb/49e3a7890ab8unverifiedvulncheckvulncheck.com/xdb/04468c21f876unverifiedvulncheckvulncheck.com/xdb/734f3d7eff96unverifiedvulncheckvulncheck.com/xdb/774a5554920funverifiedvulncheckvulncheck.com/xdb/a78d51fa522eunverifiedvulncheckvulncheck.com/xdb/839147304502unverifiedvulncheckvulncheck.com/xdb/0b33fe6d7d52unverifiedvulncheckvulncheck.com/xdb/38c75d4fe3dfunverifiedvulncheckvulncheck.com/xdb/6b216fd69575unverifiedvulncheckvulncheck.com/xdb/d7301295748aunverifiedvulncheckvulncheck.com/xdb/0e9bd89eb6d9unverifiedvulncheckvulncheck.com/xdb/86ebf09be56aunverifiedvulncheckvulncheck.com/xdb/f113515d8d4eunverifiedvulncheckvulncheck.com/xdb/69cf5f0d4eabunverifiedvulncheckvulncheck.com/xdb/5d58dcd1c530unverifiedvulncheckvulncheck.com/xdb/565faeb39625unverifiedvulncheckvulncheck.com/xdb/e71bdbbefa5aunverifiedvulncheckvulncheck.com/xdb/eb1588dc5012unverifiedvulncheckvulncheck.com/xdb/a9222b177319unverifiedvulncheckvulncheck.com/xdb/6902aa2406ccunverifiedvulncheckvulncheck.com/xdb/ee86353aa562unverifiedvulncheckvulncheck.com/xdb/1dbe3f1ab0b2unverifiedvulncheckvulncheck.com/xdb/c117b927dc2bunverifiedvulncheckvulncheck.com/xdb/4021c20bae31unverifiedvulncheckvulncheck.com/xdb/6362122abe51unverifiedvulncheckvulncheck.com/xdb/52fa692c3246unverifiedvulncheckvulncheck.com/xdb/938bb25869efunverifiedvulncheckvulncheck.com/xdb/cf5a72dc6cf9unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — erlang otp

In the same product, most dangerous first.

CVE-2025-46712LOWErlang/OTP SSH Has Strict KEX ViolationsEPSS 0.6%CVE-2025-26618HIGHSSH SFTP packet size not verified properly in Erlang OTPEPSS 0.5%CVE-2025-30211HIGHKEX init error results with excessive memory usageEPSS 0.5%CVE-2024-53846MEDIUMssl fails to validate incorrect extened key usageEPSS 0.3%